if a file with a 'non sanitised' filename is put into pub, it will cause twiki's rendering to break. If a user then updates some of the attachment attributes, a new META entry may be created, and that will also be invalid.
whats missing is some equivalent to TWiki::Sandbox::sanitiseAttachmentName, though obviously, it can't actually change the filename.
I'm going to suggest that it just reject that file, and put a message into the log, until twiki can deal.
fixed in 4.2
- 22 Nov 2007